Re: how to tell tcpdump only to capture packets that go throught iptables

[Denis Ovsienko <infrastation () yandex ru>]

19.03.2014, 06:18, "fsluck" <linuxluck () 163 com>:
> how to tell tcpdump only to capture packets that go throught iptables

iptables can send packets to NetFilter loggger (-j NFLOG --nflog-group 20) on which tcpdump can capture (-i nflog:20)

> i want to calculate how many icmp packets are received  after i setup several iptables rules for icmp.

Mere counting is possible even without tcpdump: each iptables rule has counters for bytes and packets (iptables -vnL 
INPUT).

-- 
    Denis Ovsienko
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers